Cross-site scripting (XSS)
How injected scripts steal data and hijack sessions, and what stops them.
Open to opportunities
Joshua Talbot
Ethical hacker and penetration tester
I test networks, applications and infrastructure for weaknesses, then write up how they break and how to close them. This site collects the articles, tutorials and reference sheets from that work.
- 50+ machines rooted
- 1 published paper
- Hacking since 2017
Browse by topic
-
Linux
Command line, services and everyday administration.
-
Networking
Protocols, scanning and how traffic actually moves.
-
Cisco
Switching, routing and device configuration.
-
Penetration testing
Methodology, recon and exploitation in authorised labs.
-
Metasploit
Using the framework, from first session to post-exploitation.
-
Web security
Injection, XSS and the other ways web applications fail.
-
System administration
Hardening, firewalls and keeping servers defensible.
Latest articles
-
-
SSH port knocking
Keep SSH closed until a sequence of connection attempts arrives in the right order.
-
Mapping a network with Nmap
Find open ports and running services, the starting point of most security audits.
About
My background is unikernel security research. I now build penetration-testing skills through hands-on labs and personal projects, and I like pulling systems apart to see exactly how they break.